Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/6pOtqX8kexAouol8ee1TCswLDnw.roa
File: 6pOtqX8kexAouol8ee1TCswLDnw.roa (raw, json)
Hash identifier: ZQNezyUq0e1zt3Bosi3IY647P3Lk/cXUqmPBzTwCbfU=
Subject key identifier: EA:93:AD:A9:7F:24:7B:10:28:BA:89:7C:79:ED:53:0A:CC:0B:0E:7C
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 01856F26B28EC459119A2A73BD72F70A194A
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/6pOtqX8kexAouol8ee1TCswLDnw.roa
Signing time: Sun 01 Jan 2023 21:04:45 +0000
ROA not before: Sun 01 Jan 2023 21:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39542
IP address blocks: 185.43.60.0/22 maxlen: 22
185.137.252.0/23 maxlen: 24
193.201.37.0/24 maxlen: 24
193.201.38.0/24 maxlen: 24
193.201.35.0/24 maxlen: 24
193.201.43.0/24 maxlen: 24
194.50.39.0/24 maxlen: 24
91.213.242.0/24 maxlen: 24
2a01:6960::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b2:8e:c4:59:11:9a:2a:73:bd:72:f7:0a:19:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Jan 1 21:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea93ada97f247b1028ba897c79ed530acc0b0e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:a2:b6:7b:f9:28:38:76:63:0b:ca:7b:69:
a2:4e:6f:6e:c9:d7:a9:c5:98:5d:9b:0c:4f:45:0f:
d7:a2:8a:7a:a7:7e:fb:04:e7:7a:c0:f2:d9:aa:4e:
6e:c4:1a:f4:02:ee:9a:b9:9e:ba:3e:27:fe:f2:2c:
e8:e0:f4:92:cf:3d:ae:53:24:76:ee:64:cc:c8:5b:
a8:8a:24:8f:8b:ee:e3:04:69:5d:ef:1a:18:3c:26:
49:6d:db:30:a9:57:9a:37:53:75:5b:a0:82:54:5e:
41:28:e5:40:17:7d:aa:5e:e7:9c:b8:5b:f4:11:d5:
3a:29:30:a1:84:2c:21:f3:20:48:95:25:be:ca:ea:
0f:b3:fb:f7:dd:e9:23:c6:2c:62:89:5f:ab:97:7c:
fc:51:65:64:18:2e:70:b1:a5:f7:1f:d0:b4:a8:58:
ba:5f:67:51:30:7a:2b:cb:74:9f:dc:a2:66:12:4d:
9d:a0:66:69:0c:fa:4c:51:01:15:c5:ee:cc:a0:75:
60:cc:8b:d5:00:3c:e2:8b:c6:df:d0:e3:60:f1:ee:
ac:9c:1c:4c:a1:c9:b6:aa:02:f8:6b:46:0b:e3:66:
e3:2c:4f:97:22:af:f6:c4:e2:09:5c:7a:6e:25:36:
9e:82:5d:4a:50:1d:0c:59:cd:c8:37:58:bd:84:4f:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:AD:A9:7F:24:7B:10:28:BA:89:7C:79:ED:53:0A:CC:0B:0E:7C
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/6pOtqX8kexAouol8ee1TCswLDnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.242.0/24
185.43.60.0/22
185.137.252.0/23
193.201.35.0/24
193.201.37.0-193.201.38.255
193.201.43.0/24
194.50.39.0/24
IPv6:
2a01:6960::/32
Signature Algorithm: sha256WithRSAEncryption
94:67:d4:ce:4b:7d:7c:6c:35:47:51:b1:2a:bd:fc:05:6f:83:
14:22:33:eb:56:31:b9:31:3a:6e:94:b7:a4:1a:85:9c:5d:6e:
ff:bc:c2:f5:3b:07:f5:d0:2d:e4:cb:75:b1:20:e2:80:f4:d1:
03:cd:38:83:4b:71:42:48:15:15:ae:c1:f9:95:45:45:ee:4f:
56:bb:6d:c5:f5:9a:56:83:79:26:50:f1:de:45:c7:5a:a3:e4:
be:da:de:39:f3:7c:d2:e7:14:b8:14:93:dc:9c:29:55:37:16:
d8:05:98:af:30:56:a5:cb:b3:fa:f0:cc:32:20:93:de:ab:35:
bf:5e:c9:58:1a:f7:7c:a4:e1:f0:56:d9:eb:a6:80:22:7e:19:
6f:0f:9b:8b:d8:22:84:53:25:54:20:8e:14:5b:3b:5f:b8:54:
be:1a:eb:5d:73:52:45:32:c0:55:bc:db:93:31:18:3b:ca:65:
ea:9d:15:cf:ff:ea:a1:12:e0:ee:26:b0:13:7b:1a:01:b0:6f:
ff:cc:f9:2c:28:e5:a2:f0:66:dc:5e:11:83:a0:b2:fb:37:53:
2a:cf:0f:55:48:09:4b:63:75:a2:37:60:f5:c7:ce:07:ee:45:
85:00:d1:11:0a:09:67:51:c5:98:d6:12:cb:91:ac:91:7b:2a:
22:2f:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:53 2024 by rpki-client on console-fra.rpki-client.org